$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa File: dd8e5c92-820a-3d00-9890-40b0efb85734.roa (raw, json) Hash identifier: UFUDzbU5J+VQF5ZeRQ/5R26mY2RSLJ0xg8OHoz47/RU= Subject key identifier: E1:09:F2:A2:10:E8:77:37:D9:2D:91:5A:82:26:6D:4A:DE:3C:86:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679767D51C2002C519535240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:67:d5:1c:20:02:c5:19:53:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=40bb7c39-b1f8-4987-87ad-09634716a5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:59:da:b9:70:b6:07:94:48:32:0e:4f:98: b3:ac:23:74:f1:26:b6:75:b6:7a:89:32:50:fb:7d: 37:63:ff:61:0b:da:3e:de:e8:cd:8e:f9:70:8a:7a: 5d:91:f9:9b:ff:2a:17:05:55:76:db:14:37:7d:7f: 09:9a:a1:ef:9a:39:9d:7a:f1:a6:df:7d:f4:9c:de: ef:c9:69:de:a4:2a:a8:a4:75:1c:05:c9:e3:b5:5a: 53:ae:ef:f0:14:11:bc:ba:77:e3:7d:04:c6:1a:88: 6a:39:d4:3c:c9:94:31:c7:e0:ee:cf:2e:05:b1:f8: 02:35:84:06:16:68:53:39:32:b4:ca:64:63:7e:37: e6:30:cd:7a:fa:0a:e2:59:cf:34:1d:b4:79:37:cb: da:ce:a0:6c:88:28:54:47:e9:c5:ed:03:75:17:e5: 24:01:48:d9:02:5c:03:08:8a:4b:85:68:ce:53:15: c5:17:3c:4b:e7:0c:ec:ce:d9:dc:78:02:78:44:fe: 1a:77:46:73:8c:ad:b8:de:92:c9:9e:ae:b6:95:33: 83:90:e1:7a:3c:ea:aa:3f:03:7c:55:a6:08:9c:54: 35:79:ed:92:37:87:85:1a:31:3d:d3:97:f8:3d:00: c9:0c:58:77:7c:ca:4f:94:8d:f4:20:e1:50:3d:8c: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:09:F2:A2:10:E8:77:37:D9:2D:91:5A:82:26:6D:4A:DE:3C:86:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:91:0e:19:a8:e9:da:6a:94:81:dc:90:13:c3:c3:fe:22:27: d0:c0:3f:37:45:2d:8f:02:5c:09:e8:f2:cf:e7:c1:8f:0e:a3: b2:be:71:12:49:33:93:94:88:08:bf:51:af:f8:e9:4c:08:61: f7:e7:9e:ad:a7:bd:df:c3:2c:a8:50:ef:b0:a8:f1:d9:98:88: 32:91:5c:2a:f7:b0:53:fe:4d:6f:88:92:7a:0e:9e:c1:bd:5a: 8a:03:28:f1:86:51:ec:a5:ab:38:36:fe:ee:96:cb:bf:b4:fd: b7:b9:bf:87:ae:34:51:8e:35:f1:b9:99:16:f1:30:be:9f:26: f1:6f:d0:09:a6:59:5a:53:d4:7e:00:aa:06:20:d2:01:66:db: d0:67:2a:5c:91:df:49:cb:47:fe:39:7c:ec:5c:1e:10:07:36: 29:bc:2f:90:51:d5:49:30:c2:a3:f6:cc:01:dc:45:b0:a2:93: 42:46:0e:4b:56:05:9c:32:9e:a2:cb:82:2d:16:6b:53:a6:fe: bf:02:af:9f:56:db:04:db:c2:70:65:a2:c3:69:24:24:f0:c2: 1d:84:8b:8c:52:e5:75:30:16:fd:c9:67:25:35:8c:e3:82:44: 3c:c2:70:61:70:0f:bb:90:54:b0:69:14:96:0a:6b:a4:56:8a: 7a:99:fe:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2fVHCACxRlTUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDBiYjdjMzktYjFmOC00OTg3LTg3YWQtMDk2MzQ3MTZhNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmntZ2rlwtgeUSDIOT5izrCN08Sa2dbZ6iTJQ +303Y/9hC9o+3ujNjvlwinpdkfmb/yoXBVV22xQ3fX8JmqHvmjmdevGm3330nN7v yWnepCqopHUcBcnjtVpTru/wFBG8unfjfQTGGohqOdQ8yZQxx+Duzy4FsfgCNYQG FmhTOTK0ymRjfjfmMM16+griWc80HbR5N8vazqBsiChUR+nF7QN1F+UkAUjZAlwD CIpLhWjOUxXFFzxL5wzsztnceAJ4RP4ad0ZzjK243pLJnq62lTODkOF6POqqPwN8 VaYInFQ1ee2SN4eFGjE905f4PQDJDFh3fMpPlI30IOFQPYw2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEJ8qIQ6Hc32S2RWoImbUrePIbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ4ZTVjOTItODIwYS0z ZDAwLTk4OTAtNDBiMGVmYjg1NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuRDhmo6dpqlIHckBPDw/4iJ9DAPzdFLY8CXAno8s/nwY8Oo7K+cRJJ M5OUiAi/Ua/46UwIYffnnq2nvd/DLKhQ77Co8dmYiDKRXCr3sFP+TW+IknoOnsG9 WooDKPGGUeylqzg2/u6Wy7+0/be5v4euNFGONfG5mRbxML6fJvFv0AmmWVpT1H4A qgYg0gFm29BnKlyR30nLR/45fOxcHhAHNim8L5BR1UkwwqP2zAHcRbCik0JGDktW BZwynqLLgi0Wa1Om/r8Cr59W2wTbwnBlosNpJCTwwh2Ei4xS5XUwFv3JZyU1jOOC RDzCcGFwD7uQVLBpFJYKa6RWinqZ/is= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:06 2025 by rpki-client